Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 04:59:00.620 00:00:11.803 TCP 12.102.0.1:33684 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:00:02.460 00:00:11.802 TCP 12.102.0.1:50412 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:01:04.299 00:00:11.851 TCP 12.102.0.1:35112 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:01:25.147 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 05:01:25.290 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:01:25.336 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 05:01:25.293 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 05:01:25.163 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 05:01:25.158 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 05:01:25.125 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 04:57:15.760 00:06:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-03 05:02:06.201 00:00:11.769 TCP 12.102.0.1:45480 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:58:15.758 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-03 05:03:08.011 00:00:12.249 TCP 12.102.0.1:34182 -> 1.101.0.1:3000 15 1926 1 2025-12-03 05:04:10.295 00:00:11.809 TCP 12.102.0.1:53096 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:05:12.145 00:00:11.814 TCP 12.102.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:06:25.479 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 05:06:25.502 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 05:06:25.358 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:06:25.394 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 05:06:25.244 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 05:06:25.190 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 05:06:13.998 00:00:11.803 TCP 12.102.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:06:25.253 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 05:07:15.839 00:00:11.763 TCP 12.102.0.1:58014 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:08:17.643 00:00:11.832 TCP 12.102.0.1:57930 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:04:15.764 00:06:00.150 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-03 05:09:19.516 00:00:11.804 TCP 12.102.0.1:56662 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:05:15.759 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-03 05:10:21.357 00:00:12.072 TCP 12.102.0.1:33992 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:11:25.555 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 05:11:25.578 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 05:11:25.432 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:11:25.375 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 05:11:25.619 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 05:11:25.321 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 05:11:25.578 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 05:11:23.469 00:00:11.764 TCP 12.102.0.1:42916 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:12:25.272 00:00:11.801 TCP 12.102.0.1:53786 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:13:27.111 00:00:11.807 TCP 12.102.0.1:46288 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:14:28.956 00:00:11.802 TCP 12.102.0.1:46478 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:15:30.803 00:00:11.804 TCP 12.102.0.1:36784 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:11:15.764 00:06:00.151 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-03 05:16:25.312 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 05:16:25.665 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:16:25.612 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 05:16:25.582 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 05:16:25.317 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 05:16:25.484 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 05:16:25.289 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 05:16:32.641 00:00:11.809 TCP 12.102.0.1:47786 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:12:15.761 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-03 05:17:34.485 00:00:11.799 TCP 12.102.0.1:35780 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:18:36.325 00:00:11.799 TCP 12.102.0.1:47462 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:19:38.165 00:00:11.764 TCP 12.102.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:20:39.970 00:00:11.812 TCP 12.102.0.1:51608 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:21:25.532 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 05:21:25.318 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 05:21:25.327 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 05:21:25.555 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 05:21:25.667 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:21:25.464 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 05:21:25.561 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 05:21:41.819 00:00:11.805 TCP 12.102.0.1:54256 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:22:43.660 00:00:11.808 TCP 12.102.0.1:58568 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:18:15.764 00:06:00.153 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-03 05:23:45.512 00:00:11.762 TCP 12.102.0.1:58718 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:19:15.761 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-03 05:24:47.311 00:00:11.772 TCP 12.102.0.1:53294 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:25:49.118 00:00:11.808 TCP 12.102.0.1:45570 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:26:25.581 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 05:26:25.604 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 05:26:25.618 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:26:25.738 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 05:26:25.653 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 05:26:25.412 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 05:26:25.479 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 05:26:50.964 00:00:11.820 TCP 12.102.0.1:40112 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:27:52.825 00:00:11.818 TCP 12.102.0.1:55118 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:28:54.679 00:00:11.802 TCP 12.102.0.1:60928 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:29:56.520 00:00:11.800 TCP 12.102.0.1:38866 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:25:15.766 00:06:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-03 05:30:58.360 00:00:11.819 TCP 12.102.0.1:40814 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:26:15.763 00:06:00.159 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-03 05:31:25.526 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 05:31:25.931 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:31:25.850 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 05:31:25.928 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 05:31:25.681 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 05:31:25.894 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 05:31:25.504 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 05:32:00.217 00:00:11.805 TCP 12.102.0.1:46538 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:33:02.067 00:00:11.761 TCP 12.102.0.1:33612 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:34:03.868 00:00:11.805 TCP 12.102.0.1:48996 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:35:05.707 00:00:11.801 TCP 12.102.0.1:47058 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:36:07.545 00:00:11.800 TCP 12.102.0.1:51408 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:36:25.837 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 05:36:25.958 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:36:25.908 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 05:36:25.720 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 05:36:25.813 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 05:36:25.600 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 05:36:25.814 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 05:32:15.767 00:06:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-03 05:37:09.385 00:00:11.766 TCP 12.102.0.1:39510 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:33:15.765 00:06:00.159 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-03 05:38:11.191 00:00:12.305 TCP 12.102.0.1:45102 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:39:13.534 00:00:11.807 TCP 12.102.0.1:40116 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:40:15.379 00:00:11.815 TCP 12.102.0.1:33154 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:41:25.917 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 05:41:25.940 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 05:41:25.972 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:41:26.005 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 05:41:26.030 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 05:41:26.111 00:00:00.031 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 05:41:25.947 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 05:41:17.229 00:00:11.808 TCP 12.102.0.1:58458 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:42:19.088 00:00:11.801 TCP 12.102.0.1:56284 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:43:20.930 00:00:11.823 TCP 12.102.0.1:34988 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:39:15.768 00:06:00.156 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-03 05:44:22.790 00:00:11.809 TCP 12.102.0.1:55848 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:40:15.765 00:06:00.161 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-03 05:45:24.646 00:00:11.813 TCP 12.102.0.1:34382 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:46:26.339 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 05:46:26.122 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:46:26.179 00:00:00.039 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 05:46:26.017 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 05:46:25.859 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 05:46:26.171 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 05:46:26.317 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 05:46:26.498 00:00:11.761 TCP 12.102.0.1:50072 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:47:28.298 00:00:11.763 TCP 12.102.0.1:54780 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:48:30.106 00:00:11.765 TCP 12.102.0.1:46434 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:49:31.906 00:00:11.838 TCP 12.102.0.1:59404 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:50:33.783 00:00:11.816 TCP 12.102.0.1:36308 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:46:15.771 00:06:00.158 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-03 05:51:25.969 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 05:51:25.992 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 05:51:25.971 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:51:26.046 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 05:51:25.998 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 05:51:26.180 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 05:51:26.169 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 05:51:35.641 00:00:11.803 TCP 12.102.0.1:52706 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:47:15.767 00:06:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-03 05:52:37.485 00:00:11.804 TCP 12.102.0.1:35944 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:53:39.325 00:00:11.803 TCP 12.102.0.1:55758 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:54:41.167 00:00:11.805 TCP 12.102.0.1:42274 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:55:43.024 00:00:11.798 TCP 12.102.0.1:51258 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:56:26.102 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 05:56:26.127 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 05:56:26.321 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:56:26.364 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 05:56:26.127 00:00:00.049 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 05:56:26.224 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 05:56:26.208 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 05:56:44.859 00:00:11.802 TCP 12.102.0.1:55840 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:57:46.706 00:00:11.768 TCP 12.102.0.1:56624 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:53:15.776 00:06:00.155 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-12-03 04:57:15 - 2025-12-03 05:59:15 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0055s User: 0.0009s Wall: 0.0024s flows/second: 65298.6 Runtime: 0.0025s